Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F83B6/E8F18B22F73E11EF9687370DC4F9AE02/5GuTGFhaweBs84Ti7swh9HQzibs.mft
File:                     5GuTGFhaweBs84Ti7swh9HQzibs.mft (raw, json)
Hash identifier:          Xyie1+oWgwrGq/N9ZKOd7gKonNzJEmrcgjosgrE20LY=
Subject key identifier:   29:32:A4:0C:FB:08:05:B3:C1:6D:D4:C8:DC:6C:62:DA:38:00:57:6B
Authority key identifier: E4:6B:93:18:58:5A:C1:E0:6C:F3:84:E2:EE:CC:21:F4:74:33:89:BB
Certificate issuer:       /CN=A91F83B6/serialNumber=E46B9318585AC1E06CF384E2EECC21F4743389BB
Certificate serial:       3F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5GuTGFhaweBs84Ti7swh9HQzibs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F83B6/E8F18B22F73E11EF9687370DC4F9AE02/5GuTGFhaweBs84Ti7swh9HQzibs.mft
Manifest number:          3B
Signing time:             Fri 13 Jun 2025 06:29:38 +0000
Manifest this update:     Fri 13 Jun 2025 06:29:38 +0000
Manifest next update:     Fri 20 Jun 2025 06:29:38 +0000
Files and hashes:         1: 5GuTGFhaweBs84Ti7swh9HQzibs.crl (hash: BoLgVdeCnTQoiBgIICC8ZhzW0tslsZOs9ebinMomdL8=)
                          2: 3CA27876F73F11EF95C5F011C4F9AE02.roa (hash: N43S8PomeMoOc73XP6mqN9NeUSUDTrEwlo9H3GKtmMY=)
                          3: E0E5603A371611F0A29AF975C4F9AE02.roa (hash: 7sGkTVjWqxDLmNFPgwzndzV8HDq97b9L4xe31X9V3nA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F83B6/E8F18B22F73E11EF9687370DC4F9AE02/5GuTGFhaweBs84Ti7swh9HQzibs.crl
                          rsync://rpki.apnic.net/member_repository/A91F83B6/E8F18B22F73E11EF9687370DC4F9AE02/5GuTGFhaweBs84Ti7swh9HQzibs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5GuTGFhaweBs84Ti7swh9HQzibs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Jun 2025 06:29:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63 (0x3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F83B6, serialNumber=E46B9318585AC1E06CF384E2EECC21F4743389BB
        Validity
            Not Before: Jun 13 06:29:38 2025 GMT
            Not After : Jun 20 06:29:38 2025 GMT
        Subject: CN=684bc552-867f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:da:d9:8b:7d:0e:e4:1f:db:fd:56:44:b1:2d:
                    49:8c:03:9a:9c:46:4a:17:f8:d7:f5:98:24:b4:35:
                    f2:3c:26:cf:e8:32:d7:94:2d:a7:2b:e5:46:d9:66:
                    96:eb:19:52:54:d2:e7:cc:68:f5:8a:bb:ef:23:2e:
                    63:7c:6e:6f:82:0d:16:c5:f0:5a:27:7f:ba:e4:49:
                    e5:35:c4:6a:7c:e2:86:8f:a5:9a:31:67:f6:af:f7:
                    b1:71:0b:2a:8b:dd:d8:62:d3:e6:77:4a:b3:5d:bd:
                    86:70:f0:c1:28:97:65:20:81:f0:7f:ca:39:25:9b:
                    6f:7d:27:64:36:7b:66:04:06:bc:3c:e1:a1:1b:48:
                    cf:2e:d1:e4:ad:96:ab:3b:27:ee:cb:27:b1:cf:b7:
                    8c:b2:a9:08:4b:f1:dd:2c:15:d6:3d:85:d2:e4:87:
                    28:67:ec:67:2c:f3:0a:ac:b7:54:4d:4f:52:0d:d2:
                    8f:84:47:f4:b0:12:b7:a0:04:77:b5:f3:a4:51:8f:
                    82:3f:10:ec:5f:cd:98:d9:02:75:5e:92:83:1b:3f:
                    02:e0:8d:ef:d0:d5:46:a0:7d:31:a5:66:65:ed:ae:
                    bf:f1:63:e6:e4:0a:8c:c9:56:a0:69:41:76:e1:41:
                    bc:03:19:89:60:fa:42:bd:91:ff:ff:49:7b:77:c1:
                    45:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:32:A4:0C:FB:08:05:B3:C1:6D:D4:C8:DC:6C:62:DA:38:00:57:6B
            X509v3 Authority Key Identifier:
                keyid:E4:6B:93:18:58:5A:C1:E0:6C:F3:84:E2:EE:CC:21:F4:74:33:89:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F83B6/E8F18B22F73E11EF9687370DC4F9AE02/5GuTGFhaweBs84Ti7swh9HQzibs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5GuTGFhaweBs84Ti7swh9HQzibs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F83B6/E8F18B22F73E11EF9687370DC4F9AE02/5GuTGFhaweBs84Ti7swh9HQzibs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:a4:17:a7:61:3a:50:21:c6:92:e1:a0:d9:ce:96:71:5f:9e:
         e2:42:5a:17:2b:82:7f:97:b8:d4:49:b5:19:b3:9d:c8:71:dd:
         00:b4:ef:68:0e:fb:08:99:08:e0:c8:3c:85:0e:06:ab:8f:a9:
         cc:05:1b:9d:5d:3c:2f:3f:9a:dd:1a:4a:d7:76:73:1a:02:f5:
         96:d1:90:5e:6a:70:8c:7f:f1:c6:15:3c:e9:cd:30:4b:da:f1:
         28:eb:38:28:b3:6f:b4:cc:23:2f:70:b4:d9:15:96:29:d5:de:
         be:f8:f8:ee:26:61:3c:be:cc:c4:76:a9:0b:e0:42:06:45:9e:
         47:8e:17:57:e2:20:38:c0:ff:97:95:2d:f5:77:0d:a6:74:2d:
         ea:da:23:53:85:65:4b:2e:10:e5:9a:af:c2:f2:d4:86:9d:8a:
         4a:4a:82:b3:0f:e0:c0:89:cb:4e:ad:47:7e:02:6c:2d:d1:0d:
         3a:6e:92:d5:78:23:ca:07:fd:78:ca:27:37:b1:41:ae:31:76:
         ad:78:6c:43:56:ec:39:2c:20:5b:9f:e6:49:81:08:bb:f4:59:
         bb:37:bd:5c:b6:6c:02:c4:19:cc:9c:73:02:a3:d6:15:17:24:
         6b:b2:33:02:e5:93:0b:f4:19:dc:71:ad:c6:b1:04:a7:2c:ca:
         8c:a1:91:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 17:30:45 2025 by rpki-client